Yonyou UFIDA NC - Information Exposure Detection

After logging in and visiting the address where the information was leaked, you will have permission to upload files. Then just go back to the homepage and view the published content directly. !/usr/bin/env python3 -- coding: utf-8 -- """After logging in and visiting the address where the...

Synapse Mobility Login Panel - Detect

Synapse Mobility login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Synapse Mobility login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Synapse Mobility Login Panel - Detect...

Panmicro E-Mobile System - Arbitrary File Read Detection

The Panmicro E-Mobile client/cdnfile interface has an arbitrary file reading vulnerability. Unauthenticated attackers can use this vulnerability to read important system files, database configuration files, and so on. !/usr/bin/env python3 -- coding: utf-8 -- """The Panmicro E-Mobile client/cdnfi...

Elasticsearch - Local File Inclusion Detection

Elasticsearch before 1.4.5 and 1.5.x before 1.5.2 allows remote attackers to read arbitrary files via unspecified vectors when a site plugin is enabled. !/usr/bin/env python3 -- coding: utf-8 -- """Elasticsearch before 1.""" import re from kittysploit import from lib.protocols.http.httpclient...

MobiProxy Dashboard - Detect

MobiProxy dashboard was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MobiProxy dashboard was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MobiProxy Dashboard - Detect', 'description': 'MobiProx...

3CX Phone System Management Console - Panel Detect

3CX Phone System Management Console panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """3CX Phone System Management Console panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': '3CX Phone...

Totemomail SMTP Server Detection

Totemomail is a comprehensive email solution designed to address all aspects of digital communication security. !/usr/bin/env python3 -- coding: utf-8 -- """Totemomail is a comprehensive email solution designed to address all aspects of digital communication security.""" import socket from...

RethinkDB Administration Console - Detect

RethinkDB Administration Console was detected. !/usr/bin/env python3 -- coding: utf-8 -- """RethinkDB Administration Console was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'RethinkDB Administration...

BIZZY Login - Panel Detection

BIZZY login Panel was detected. BIZZY is a vulnerability management platform. !/usr/bin/env python3 -- coding: utf-8 -- """BIZZY login Panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'BIZZY Login -...

Direct Connect P2P - Detect

Detects Direct Connect P2P - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Direct Connect P2P - Detect.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'Direct Connect P2P...

NcFTPd Service - Detect

NcFTPd FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """NcFTPd FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'NcFTPd Service - Detect',...

WordPress Newsletter Manager < 1.5 - Unauthenticated Open Redirect Detection

WordPress Newsletter Manager 1.5 is susceptible to an open redirect vulnerability. The plugin used base64 encoded user input in the appurl parameter without validation to redirect users using the header PHP function, leading to an open redirect issue. !/usr/bin/env python3 -- coding: utf-8 --...

MachForm Admin Panel - Detect

MachForm Admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """MachForm Admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MachForm Admin Panel - Detect', 'description':...

BioTime Web Login Panel - Detect

BioTime Web login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """BioTime Web login panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'BioTime Web Login Panel - Detect',...

Modoboa < 2.1.0 - Improper Authorization Detection

Improper Authorization in GitHub repository modoboa/modoboa prior to 2.1.0. !/usr/bin/env python3 -- coding: utf-8 -- """Improper Authorization in GitHub repository modoboa/modoboa prior to 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

FreeScout Panel - Detect

FreeScout panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """FreeScout panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FreeScout Panel - Detect', 'description': 'FreeScout panel...

Jboss Seam Debug Page Enabled Detection

Jboss Seam Debug Page was exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Jboss Seam Debug Page was exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Jboss Seam Debug Page Enabled Detection',...

NatShell Debug File - Remote Code Execution Detection

The NatShell debug file is susceptible to a remote code execution vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """The NatShell debug file is susceptible to a remote code execution vulnerability.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient...

VTUN Server - Detection

VTUN Virtual Tunnel server was detected. !/usr/bin/env python3 -- coding: utf-8 -- """VTUN Virtual Tunnel server was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'VTUN Serve...

Detect DNS over HTTPS

With DNS over HTTPS DoH, DNS queries and responses are encrypted and sent via the HTTP or HTTP/2 protocols. DoH ensures that attackers cannot forge or alter DNS traffic. DoH uses port 443, which is the standard HTTPS traffic port, to wrap the DNS query in an HTTPS request. DNS queries and respons...

OpenCart Login Panel - Detect

OpenCart login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OpenCart login panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OpenCart Login Panel - Detect',...

DedeCmsV5.6 Carbuyaction Fileinclude Detection

A vulnerability in DedeCMS's 'carbuyaction.php' endpoint allows remote attackers to return the content of locally stored files via a vulnerability in the 'code' parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in DedeCMS's 'carbuyaction.""" from kittysploit import from...

Fronius Datalogger Web - Login Panel Detection

Fronius Datalogger Web is a web interface for Fronius solar inverter data loggers, providing real-time monitoring and configuration of photovoltaic systems. !/usr/bin/env python3 -- coding: utf-8 -- """Fronius Datalogger Web is a web interface for Fronius solar inverter data loggers, providing...

Gitea Public Registration Enabled Detection

A misconfiguration in GlitchTip allows arbitrary users to sign up. !/usr/bin/env python3 -- coding: utf-8 -- """A misconfiguration in GlitchTip allows arbitrary users to sign up.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info ...

Sitefinity Login Detection

This template identifies the Sitefinity login page. !/usr/bin/env python3 -- coding: utf-8 -- """This template identifies the Sitefinity login page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sitefinity Login...

MemTracker - Exposure Detection

MemTracker was detected and appeared to be accessible without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """MemTracker was detected and appeared to be accessible without authentication.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

DirectAdmin Login Panel - Detect

DirectAdmin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """DirectAdmin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'DirectAdmin Login Panel - Detect', 'description...

info.cgi Environment Variable - Disclosure Detection

Detected exposure of server environment variables through the info.cgi script. This can leak sensitive paths, internal IPs, software versions, credentials in env, etc. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposure of server environment variables through the info.""" from...

Kube API Version Detection

Searches for exposed Kubernetes API servers which return version information unauthenticated !/usr/bin/env python3 -- coding: utf-8 -- """Searches for exposed Kubernetes API servers which return version information unauthenticated.""" from kittysploit import from lib.protocols.http.httpclient...

Flow Configuration - Exposure Detection

Detects an exposed Flow configuration file. These files may contain sensitive information such as credentials, internal endpoints, or environment settings. !/usr/bin/env python3 -- coding: utf-8 -- """Detects an exposed Flow configuration file.""" from kittysploit import from...

Ruijie RG-EG - Remote Code Execution Detection

Ruijie RG-EG easy gateway WEB management system front-end RCE has a command execution vulnerability. An attacker without identity authentication can execute arbitrary commands to control server permissions. !/usr/bin/env python3 -- coding: utf-8 -- """Ruijie RG-EG easy gateway WEB management syst...

Karma Configuration File - Detect

Karma configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Karma configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Karma Configuration File - Detect',...

WordPress Knews Multilingual Newsletters 1.1.0 - Cross-Site Scripting Detection

WordPress Knews Multilingual Newsletters 1.1.0 plugin contains a cross-site scripting vulnerability. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials an...

PlantUMLServer - Detect

PlantUMLServer is an open-source web application that renders UML diagrams from textual descriptions. It provides a web interface for the PlantUML diagram generation tool, allowing users to create various types of diagrams including class diagrams, sequence diagrams, and activity diagrams through...

WordPress AI Engine Plugin - Token Exposure Detection

Unauthenticated sensitive information exposure in AI Engine WordPress plugin = 3.1.3 exposes bearer tokens via REST API endpoints when No-Auth URL is enabled. !/usr/bin/env python3 -- coding: utf-8 -- """Unauthenticated sensitive information exposure in AI Engine WordPress plugin = 3.""" import r...

Dlink DSR-250 and Netgear Prosafe - Cross-Site Scripting Detection

Dlink DSR-250 and Netgear Prosafe are vulnerable to reflected cross site scripting endpoint scgi-bin/platform.cgi in parameter SSLVPN. !/usr/bin/env python3 -- coding: utf-8 -- """Dlink DSR-250 and Netgear Prosafe are vulnerable to reflected cross site scripting endpoint scgi-bin/platform.""" fro...

LocalAI - Detect

An instance running LocalAI was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An instance running LocalAI was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'LocalAI - Detect', 'description': 'An...

Ecology Syncuserinfo - SQL Injection Detection

Ecology Syncuserinfo contains a SQL injection vulnerability via a GET request. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. !/usr/bin/env python3 -- coding: utf-8 --...

Hummingbird HCLFTPD Service - Detect

Hummingbird HCLFTPD service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Hummingbird HCLFTPD service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name':...

SFTPGo Admin - Setup Detection

SFTPGo Admin Password setup page has been exposed. !/usr/bin/env python3 -- coding: utf-8 -- """SFTPGo Admin Password setup page has been exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SFTPGo Admin - Setup...

ESPEasy Mega Panel Exposure Detection

ESPEasy Mega Panel is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """ESPEasy Mega Panel is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ESPEasy Mega Panel Exposure Detection', 'description': 'ESPEa...

Yearning - Directory Traversal Detection

Yearning has a directory traversal vulnerability that can be exploited by attackers to obtain sensitive information. The vulnerability is present in multiple versions of Yearning. !/usr/bin/env python3 -- coding: utf-8 -- """Yearning has a directory traversal vulnerability that can be exploited b...

Storybook Panel - Detect

Storybook panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Storybook panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Storybook Panel - Detect', 'description': 'Storybook panel was...

Collectd Exporter Metrics Detection

Collectd Exporter Metrics is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Collectd Exporter Metrics is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Collectd Exporter Metrics Detection',...

Deluge WebUI Login Panel - Detect

Deluge WebUI login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Deluge WebUI login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Deluge WebUI Login Panel - Detect',...

UPS Network Management Card 4 Path Traversal Detection

UPS Network Management Card version 4 suffers from a path traversal vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """UPS Network Management Card version 4 suffers from a path traversal vulnerability.""" import re from kittysploit import from lib.protocols.http.httpclient import...

Well-Known PKI Validation Directory Detection

Detects CA/B Forum PKI validation artefacts directory. !/usr/bin/env python3 -- coding: utf-8 -- """Detects CA/B Forum PKI validation artefacts directory.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Well-Known PK...

PrNET FTP Service - Detect

PrNET FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PrNET FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'PrNET FTP Service - Detect',...

Server Backup Manager SE Panel - Detect

Server Backup Manager SE login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Server Backup Manager SE login panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Server Back...

Elastic Cloud API Key Detection

Detects Elastic Cloud API keys used for programmatic access to the Elastic Cloud and serverless APIs. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Elastic Cloud API keys used for programmatic access to the Elastic Cloud and serverless APIs.""" import re from kittysploit import from...